Fadavvi

Sub-Drill

A very (very) FAST and simple subdomain finder based on online & free services. Without any configuration requirements.

Yara-Repo

A script to collect (the most famous) Yara rules from more than 150 free resources. Free alternative to: https://valhalla.nextron-systems.com/

BurpPro-FastCrawler

The simplest way to integrate your subdomain enum outputs with Burp Pro (Fast Crawler)

Gamal

A tiny flask app for helping pentesters and bug hunters in XSS, Session Hijacking, Session Riding and Cookie Thieve.

XML2Elastic

Insert any XML file to Elastic Search ( I Used to send my Pentest results: ZAP, Nmap, Nessus, OpenVAS, Acunetix, Arachni, Nikto, etc )

CVE-2018-17431-PoC

Proof of consept for CVE-2018-17431

Fadavvi.github.io

Milad Fadavvi's Personal blog about offensive security

Gopher

C# tool to discover low hanging fruits

bash

Bash Scripts I wrote

RedTeam-Tactics-and-Techniques

Red Teaming Tactics and Techniques

Sagan

Automation and integration scripts for Sagan

scripts

Useful scripts in Pentest and Red-teaming

veraz

Veraz is a file and folder finder based on URL. Some kind of file/folder bruteforcer.

YCSM

You Can't See Me - a sample, fast, free and open source PHP code obfuscator with encoder

fadavvi

BChecks

BChecks collection for Burp Suite Professional

bsentry

BSentry is a comprehensive collection of additional security checks designed to enhance your Burp Suite experience.

XTranslation